Google Desktop Exposed: Exploiting an Internet Explorer Vulnerability to Phish User Information

Google Desktop Exposed: Exploiting an Internet Explorer Vulnerability to Phish User Information Overview It was bound to happen. I was recently intrigued by the possibility of utilizing Google Desktop for remote data retrieval of personal user data (such as credit cards and passwords) through the use of a malicious web page. Now, thanks to a severe design flaw in Internet Explorer, I managed to sh

[h5y1m141]

CSSXSSの元ネタ

[nitoyon]

GDS Exploitの方法。}{ を含むページをCSSとしてimportできちゃう。

[fuba]

WinIEでdocument.styleSheets[0].imports[1].cssTextにimportしたファイルの生テキストが入ってしまい何でもできる脆弱性（CSSXSS）の詳細。これはグロい